Threat Intelligence · PHP Security Radar

PHP Checker & Vulnerability Scanner

SECURITY ADVISORY CVE-2026-109618 / 19

CVSS 9.2 “php2shell”

Emergency Releases (PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35): Patches critical unauthenticated Remote Code Execution (RCE) vulnerabilities across active PHP branches. Immediate verification recommended:

PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

Enterprise Runtime Vulnerability Intelligence

Audit Your Website's PHP Security Baseline

Enter your domain name above to initiate an automated, non-invasive audit of your public web server headers. The scanner identifies exposed PHP versions, cross-references active releases with critical RCE vulnerabilities, and verifies lifecycle status against official security end-of-life dates.

Public Telemetry Check

Inspects live X-Powered-By and Server headers without executing code on your host or causing service downtime.

CVE Cross-Referencing

Evaluates whether your running PHP branch is exposed to critical zero-day exploits including CVE-2026-109618 and CVE-2026-109619.

Lifecycle Verification

Checks your active PHP branch against official security support windows and recommends target secure patch releases.